CVE-2017-1000402

Jenkins Swarm Plugin Client 3.4 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks...

CVE-2017-1000402

Summary (supported by provided documents): Jenkins Swarm Plugin Client 3.4 and earlier bundled Apache Commons HttpClient with the vulnerability CVE-2012-6153, which causes improper verification of the server SSL certificate hostname. This leads to susceptibility to man‑in‑the‑middle attacks. The ...

CVE-2017-1000402

Jenkins Swarm Plugin Client 3.4 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks...

Is Docker Swarm going to change how we do microservices APIs?

During the DockerCon a couple of weeks ago the new native swarm functionality was one of the highlighted themes. What is a swarm? A swarm is a cluster of Docker engines, or nodes, which acts as an orchestrator, monitor and ingress load balancer for all the services deployed on swarm. The Docker...

Swarm AutoLiker Beta - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Swarm AutoLiker Beta published at the 'play' market has multiple vulnerabilities...

Modern Reverse Proxy: Traefik

Modern Reverse Proxy Træfɪk is a modern HTTP reverse proxy and load balancer made to deploy microservices with ease. It supports several backends Docker , Swarm , Mesos/Marathon , Kubernetes , Consul , Etcd , Zookeeper , BoltDB , Rest API, file… to manage its configuration automatically and...

Vulnerability warning: Docker Swarm Manager remote management port access-vulnerability warning-the black bar safety net

! Docker is a domestic and international Cloud Platform common application the lightweight container, AWS, Baidu, etc. are used. Typically used for lightweight deployment of applications. In Docker Swarm of deployment documentation, since the default there is some insecurity in the sample...

Alien Swarm - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Alien Swarm published at the 'play' market has multiple vulnerabilities...

Swarm — by Foursquare - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Swarm — by Foursquare published at the 'play' market has multiple vulnerabilities...

Docker Remote API 未授权访问

介绍 docker 在使用集群管理如:Kubernetes,swarm时，要使用remote api对节点进行管理.remote api无认证时的默认端口是2375需要TLS认证默认登录是2376。 remote api默认是可以不需要认证能直接访问，能直接对docker进行操作,如新建容器,删除容器,查看镜像容器信息等... remote api操作方法见docker官方文档 检测docker remote api 未授权访问可以使用curl或者直接用浏览器访问 http://ip:2375/info 如果返回了json证明漏洞存在，如下图 其他参考链接...

SQL Injection Vulnerability in Elephant Swarm Website Management System

Elephant Herd Website Management System is a system developed by Century Elephant Herd Culture Communication Beijing Co. There is a generic SQL injection vulnerability in the Elephant Group website management system, and most websites have the same administrative password in the backend, allowing...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the kernel-image-2.4.27-sb1-swarm-bn operating system of Debian GNU/Linux may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

WordPress Facebook Promotion Plugin <= 1.3.4 - Multiple XSS

Because of these vulnerabilities in admin/swarm-settings.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...